
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa
File: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (raw, json)
Hash identifier: v7DJudWf3ta86HIN/myNYYKoGmeXzKtpr14NT1uUyL0=
Subject key identifier: 12:E5:34:1C:D0:14:C3:E5:61:B6:29:70:3A:10:40:AA:5E:45:A1:63
Certificate issuer: /CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E
Certificate serial: 44966EFF2BFD1D13E03E18102F6AEBE618A44D08
Authority key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa
Signing time: Sun 03 May 2026 03:02:45 +0000
ROA not before: Sun 03 May 2026 02:57:45 +0000
ROA not after: Sun 02 May 2027 03:02:45 +0000
asID: 140452
IP address blocks: 2001:df4:2d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl
rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:96:6e:ff:2b:fd:1d:13:e0:3e:18:10:2f:6a:eb:e6:18:a4:4d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E
Validity
Not Before: May 3 02:57:45 2026 GMT
Not After : May 2 03:02:45 2027 GMT
Subject: CN=12E5341CD014C3E561B629703A1040AA5E45A163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:29:25:f0:3c:32:e0:4d:be:a2:4c:d4:d9:
66:25:f4:6f:87:39:eb:b7:68:1c:66:5f:c5:a7:20:
08:56:4c:74:a6:28:18:f5:e2:8d:e1:41:1d:29:0a:
2d:6a:11:52:71:fb:3d:53:86:b6:2a:85:96:8b:de:
d6:f9:8d:24:5c:44:4c:f9:7a:7e:94:7f:4e:fe:0d:
5e:26:b5:66:a2:04:be:20:b1:29:aa:98:ae:ba:9e:
fc:85:d4:66:98:b2:8f:dd:f7:44:70:14:5a:4a:f4:
6a:18:72:49:4f:9b:3c:24:fe:5a:74:08:8b:9c:ff:
38:e2:82:3b:42:85:f3:b7:7f:26:32:35:4f:ad:47:
79:07:fa:14:d1:da:ee:05:af:ea:af:3c:c0:1b:5a:
8a:08:26:81:73:ba:3a:70:f8:77:42:ed:90:df:28:
2f:ba:b6:f9:14:37:f9:ca:64:82:7b:13:22:93:ee:
57:78:f9:04:ed:8e:93:f9:7d:73:a6:7f:7c:30:c9:
02:1c:86:91:25:cb:72:49:ce:cd:6d:15:33:48:97:
53:ff:55:76:be:ee:b3:3d:e8:a4:e7:29:5f:3c:27:
ff:a2:2b:a4:08:87:9b:0f:da:eb:c6:91:3e:5e:59:
6e:92:56:e5:09:b2:aa:31:33:28:93:33:2d:3a:e1:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E5:34:1C:D0:14:C3:E5:61:B6:29:70:3A:10:40:AA:5E:45:A1:63
X509v3 Authority Key Identifier:
keyid:BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:2d80::/48
Signature Algorithm: sha256WithRSAEncryption
77:7d:a6:68:6e:73:24:9a:22:e2:7f:bc:32:7c:eb:39:e6:84:
fa:98:4a:48:e6:ed:32:48:14:35:78:fe:8c:7d:fe:ca:e5:84:
04:bc:6f:5a:98:50:c5:6e:ca:69:ee:d9:3f:46:4a:99:b0:61:
35:8a:25:4b:00:92:30:f4:9c:7b:dd:92:6a:e8:96:54:7a:90:
d5:bd:50:ae:55:5d:fe:5d:1c:a2:2f:94:48:ad:5a:14:45:d0:
90:d3:72:95:11:4a:22:49:47:13:41:c7:2e:a5:ff:e0:ea:c9:
af:85:cc:a0:a8:13:c4:40:84:8b:09:b1:81:aa:0d:12:5f:3a:
d0:07:53:27:35:6b:2a:bf:47:77:b3:13:0b:01:14:b8:92:4f:
0d:27:74:b0:29:a5:96:ea:2a:4c:96:cd:8e:a5:5a:1c:9b:dc:
58:95:c8:d3:fa:bc:a8:0f:a7:0d:0c:36:f1:83:aa:99:a6:a0:
28:ed:f7:2b:e5:34:58:21:cb:6e:99:7e:08:d7:f4:b4:43:bd:
6b:b6:50:53:a3:00:b0:ba:9f:ff:84:46:de:27:19:f5:81:7c:
f9:00:b7:84:aa:5d:f5:06:34:84:3f:72:e4:23:63:bd:62:45:
6c:f7:43:67:9c:02:a5:88:6f:92:09:80:bd:69:3f:7c:80:82:
9b:00:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:05 2026 by rpki-client